higgsfield-soul-id

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). This is a raw GitHub-hosted install.sh (downloadable shell script) from a non-official/unknown user and the skill explicitly instructs piping it to sh — executing remote shell code — which is a high-risk distribution pattern for malware.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's bootstrap step runs a runtime install command that fetches and executes remote code (curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh), which is a required dependency and thus poses high risk.